With exploit code in circulation and no patch available for a buffer-overflow bug, Oracle Corp.’s flagship database software is open to attack, security researchers said today. The vulnerability was ...

Oracle Corp. appears to have accidentally released details about an unpatched security vulnerability in its database software, including sample code that could be used to exploit the problem. Details ...

The Fortra FileCatalyst Workflow is vulnerable to an SQL injection vulnerability that could allow remote unauthenticated attackers to create rogue admin users and manipulate data on the application ...

Cybersecurity professionals who need to track the latest vulnerability exploits now have a new tool designed to make their job easier, with the launch today of VulnCheck XDB, a database of exploits ...

A severe vulnerability affecting multiple MongoDB versions, dubbed MongoBleed (CVE-2025-14847), is being actively exploited in the wild, with over 80,000 potentially vulnerable servers exposed on the ...

Critical security patch: Apple's iOS/iPadOS 26.3 fixes CVE-2026-20700, a WebKit flaw enabling remote code execution from a single click on a malicious link. Why it matters: The 'DarkSword' exploit can ...